{
  "Event": {
    "analysis": "1",
    "date": "2026-02-11",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-02-11",
    "publish_timestamp": "1770852347",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1770852346",
    "uuid": "2f438afa-9403-4704-8acc-e22b10849912",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET EXPLOIT Fortigate VPN - Repeated GET Requests to /remote/logincheck (CVE-2023-27997)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T00:52:12.431950+00:00",
        "timestamp": "1770771134",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "77f6901f-d074-4e7b-9af8-d5e0e184979c",
        "value": "2001:470:1:fb5::260",
        "Tag": [
          {
            "colour": "#008a3f",
            "local": false,
            "name": "misp:threat-level=\"high-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T00:54:14.465094+00:00",
        "timestamp": "1770771256",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c6b012ee-7ed8-4342-8e90-f5f6549f367f",
        "value": "43.154.250.181",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T00:55:38.090339+00:00",
        "timestamp": "1770771339",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "46fcfd0b-1185-4c92-bac7-83e168a46b1e",
        "value": "43.166.242.189",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T00:56:05.576879+00:00",
        "timestamp": "1770771367",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "59bc8583-ac44-4bef-945e-2e5f398200e7",
        "value": "43.166.128.86",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T00:56:12.796949+00:00",
        "timestamp": "1770771374",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5f690737-fafe-47f5-85ed-32ae7b765f65",
        "value": "101.33.81.73",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T00:57:14.629756+00:00",
        "timestamp": "1770771436",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b70d9238-3f6e-47f6-a467-f5d6f27e3369",
        "value": "43.135.36.201",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T00:57:48.480941+00:00",
        "timestamp": "1770771470",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2b62af52-f85f-4452-aee4-0362227cac85",
        "value": "43.130.72.40",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T00:59:24.482574+00:00",
        "timestamp": "1770771566",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0c4fae10-b3a8-49c3-bd66-cd4a6e53d134",
        "value": "49.51.132.100",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T01:04:46.571412+00:00",
        "timestamp": "1770771888",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0ccf5f5a-3b75-4231-bc18-99aabdf81739",
        "value": "43.157.174.69",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T01:09:48.652023+00:00",
        "timestamp": "1770772190",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "78b9e1ef-3484-4e3e-a214-fba64ec3e9a9",
        "value": "43.135.211.148",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T01:12:30.720895+00:00",
        "timestamp": "1770772352",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6842610c-d0a4-48e9-876c-11d6cdd61f9a",
        "value": "43.159.143.190",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T01:16:29.702794+00:00",
        "timestamp": "1770772591",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "40270725-75f6-4ee7-afea-9cc6d7ad7845",
        "value": "49.51.166.228",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T01:19:04.648124+00:00",
        "timestamp": "1770772746",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9de76265-564d-437b-ae78-38a757c0df2f",
        "value": "43.133.66.51",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T01:21:12.314507+00:00",
        "timestamp": "1770772874",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "071a0057-3f7b-49bb-98d6-5ed19b4541ac",
        "value": "170.106.187.106",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "- i Censys - HTTP User-Agent Scanner",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T05:03:20.023266+00:00",
        "timestamp": "1770786201",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "737d01c3-1fcc-4927-b6bb-6232acda1efb",
        "value": "162.142.125.47",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SERVER WEB-PHP phpinfo access",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T05:12:06.129433+00:00",
        "timestamp": "1770786727",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "630bf570-4d43-4d19-8fda-a039463ec9fe",
        "value": "74.248.121.170",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET EXPLOIT Fortigate VPN - Repeated GET Requests to /remote/logincheck (CVE-2023-27997)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T05:15:08.810116+00:00",
        "timestamp": "1770786910",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "82b30013-47c1-4195-989b-839c57a2eb9b",
        "value": "2001:470:1:fb5::1c0",
        "Tag": [
          {
            "colour": "#008a3f",
            "local": false,
            "name": "misp:threat-level=\"high-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SERVER WEB-PHP phpinfo access",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T05:19:35.436024+00:00",
        "timestamp": "1770787177",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2bce838d-7977-4bea-9e1b-0db6221edab5",
        "value": "209.101.24.172",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "- i Censys - HTTP User-Agent Scanner",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T05:24:05.051656+00:00",
        "timestamp": "1770787446",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ffc3fb98-acec-44b7-b8b8-1e64e40c0701",
        "value": "162.142.125.40",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "- i Censys - HTTP User-Agent Scanner",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T06:36:05.011889+00:00",
        "timestamp": "1770791766",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "1fbd8952-a424-4dd9-8836-4bfc29afd2f4",
        "value": "2602:80d:1005::17",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SERVER WEB-PHP phpinfo access",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T06:55:45.929531+00:00",
        "timestamp": "1770792947",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "13d2d354-83c4-4896-a72a-803bd9faecd4",
        "value": "172.213.18.139",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:04:36.583650+00:00",
        "timestamp": "1770793478",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "87384a60-31ba-4979-98f8-84904ac67ec0",
        "value": "43.157.98.187",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:06:05.531957+00:00",
        "timestamp": "1770793567",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "99bda3a8-280f-4d20-9b79-dc8214606693",
        "value": "43.164.197.209",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:11:05.077617+00:00",
        "timestamp": "1770793866",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "392c40e4-c402-4ccb-81ac-fac1baae9d20",
        "value": "43.132.214.228",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:14:09.369981+00:00",
        "timestamp": "1770794051",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9c276777-e642-4011-9eff-35b4ac22ff39",
        "value": "129.226.174.80",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:14:26.128886+00:00",
        "timestamp": "1770794067",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "8f07c345-150a-49d0-ba39-639a9a6f67e9",
        "value": "49.51.141.76",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SERVER ColdFusion componentutils access",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:15:20.976998+00:00",
        "timestamp": "1770794122",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2f4f6306-615d-4a1f-a81d-4e572cdcf07c",
        "value": "172.237.117.50",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:17:07.814604+00:00",
        "timestamp": "1770794230",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d6f764fb-d9c7-4b95-aa9e-735ca40af200",
        "value": "43.130.116.87",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:17:26.400072+00:00",
        "timestamp": "1770794248",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "725aa4ef-dc83-4694-8d9a-2a9c07035ba0",
        "value": "101.32.49.171",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:19:16.848075+00:00",
        "timestamp": "1770794358",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c3c78ca2-891f-4c45-890f-70bda00c0fa5",
        "value": "43.135.115.233",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:22:47.085198+00:00",
        "timestamp": "1770794568",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b927cf0c-eca7-4289-bd5f-17969406d2d7",
        "value": "43.130.141.193",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:25:52.053740+00:00",
        "timestamp": "1770794753",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "baad8088-b564-4a24-b43d-ee05978ce5cd",
        "value": "43.153.26.165",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:27:53.375541+00:00",
        "timestamp": "1770794875",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "3d29128b-bee2-4f81-8e19-4b27288f4a72",
        "value": "43.157.67.70",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T07:29:43.659782+00:00",
        "timestamp": "1770794985",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "53cab74c-b449-4bd4-a003-58ba1bfaf190",
        "value": "101.32.52.164",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SERVER WEB-PHP phpinfo access",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T11:38:43.030927+00:00",
        "timestamp": "1770809924",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e3998ef4-8fda-4ef2-8ac3-839f9711ee88",
        "value": "172.213.221.38",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T12:59:49.036273+00:00",
        "timestamp": "1770814790",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d3faa15b-7c89-48b9-ab72-d01daa502d02",
        "value": "43.157.43.147",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T13:10:50.241179+00:00",
        "timestamp": "1770815451",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6d765df3-f495-4de8-a4d0-54a2c1e36f79",
        "value": "43.130.131.18",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T13:17:31.008706+00:00",
        "timestamp": "1770815852",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "69f8cf22-9f15-4a9e-981e-5c3e2b9c90ce",
        "value": "43.156.232.190",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T13:19:09.258271+00:00",
        "timestamp": "1770815951",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6d36e3fe-e01c-4ca6-83c4-c4874afdf7ba",
        "value": "43.157.52.37",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T13:56:23.954691+00:00",
        "timestamp": "1770818185",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "51ad970e-6d68-43c4-9453-79e801be56e2",
        "value": "43.164.197.224",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T14:57:29.934671+00:00",
        "timestamp": "1770821851",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "364842f3-557d-497e-9fb1-5e02d51565bf",
        "value": "2a14:7c1::2",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "- i Censys - HTTP User-Agent Scanner",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T18:27:25.105528+00:00",
        "timestamp": "1770834446",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "126c8ef1-a71e-49de-b3db-b82494567292",
        "value": "206.168.34.220",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Google Webcrawler User-Agent (Mediapartners-Google)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T18:45:11.601608+00:00",
        "timestamp": "1770835513",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "4b050029-619b-4b31-b7c8-e5301dcbeb81",
        "value": "165.73.67.100",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T19:13:20.748873+00:00",
        "timestamp": "1770837202",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "40fd4512-69ee-4d5d-a6d9-48e9f12d12d0",
        "value": "43.166.130.123",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T19:17:16.190153+00:00",
        "timestamp": "1770837437",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b1666e2b-4dfe-43f4-b9aa-9c760c51363b",
        "value": "43.157.22.109",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T19:17:44.827691+00:00",
        "timestamp": "1770837466",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9fc4903d-8c9c-45cf-86e0-99b46b7eec3f",
        "value": "43.157.62.101",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T19:20:29.806995+00:00",
        "timestamp": "1770837631",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "4f2a9c14-6c18-4e68-8d26-3e0fe4d29b15",
        "value": "43.131.26.226",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T19:23:58.972948+00:00",
        "timestamp": "1770837840",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e001da56-e9be-4ed3-87a2-28ee79dd8834",
        "value": "43.157.191.20",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "- i Censys - HTTP User-Agent Scanner",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T19:26:29.981090+00:00",
        "timestamp": "1770837991",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9a910087-8950-4e2a-bab6-03819be5b6e4",
        "value": "167.94.138.175",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-11T23:25:45.055991+00:00",
        "timestamp": "1770852346",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f0986e43-5042-4671-ab9b-2343c0cbc295",
        "value": "174.138.64.240",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}